
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier: e1WkCB9RRqnEKd38PxfykOPtnisO40G5LdjpVFWnzKs=
Subject key identifier: A1:37:BE:9B:D7:60:82:5E:9E:BC:B8:64:EB:31:E0:AE:99:D0:BC:89
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer: /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial: 0476423286D0E77614EBBC8B70E1A3E2D52C91DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number: 01EE
Signing time: Sat 10 May 2025 09:32:31 +0000
Manifest this update: Sat 10 May 2025 09:27:31 +0000
Manifest next update: Sun 11 May 2025 09:46:31 +0000
Files and hashes: 1: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: LCPvAW7znySUZXFz7XFpzgRN+6mbY+WRXUnz/hkIdT0=)
2: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: hA7QguAU1uBvax2zTblzbayxA6Ra0aunOmFn/Aewad8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:46:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:76:42:32:86:d0:e7:76:14:eb:bc:8b:70:e1:a3:e2:d5:2c:91:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Validity
Not Before: May 10 09:27:31 2025 GMT
Not After : May 11 09:46:31 2025 GMT
Subject: CN=A137BE9BD760825E9EBCB864EB31E0AE99D0BC89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:57:1c:ef:86:0b:d9:7b:85:2f:6d:5b:66:
ed:b7:1e:83:4f:5d:c5:95:84:97:a5:73:1c:05:60:
8e:27:6f:f0:4a:7b:72:58:47:f7:08:46:b9:ed:55:
61:ba:72:84:f9:52:5e:63:12:e7:62:aa:34:79:5c:
10:a3:5e:2c:8f:58:b8:e0:4b:55:80:85:15:ea:54:
b8:34:de:af:30:a1:58:1d:7e:db:9f:41:c5:e4:98:
2f:db:09:de:4c:3c:16:18:36:9f:dc:e2:57:f5:28:
ca:2f:f4:5a:46:ec:3a:90:bd:26:e1:2f:ec:15:e1:
a9:b8:e4:a5:97:12:71:3e:72:f5:58:f4:f5:dc:50:
f2:b6:c7:3b:5c:6d:75:37:69:fd:f7:d0:21:16:be:
44:49:40:e2:3e:ab:e7:f7:bb:e6:3c:d1:e6:9d:e2:
6b:4e:97:05:b9:8f:50:41:99:0f:6e:06:e7:fa:04:
6a:fb:8f:78:88:90:b1:6d:85:a4:0a:18:e6:56:94:
5e:fa:e3:8b:1a:3b:7d:88:50:17:6a:87:3a:c6:d4:
c7:fc:78:52:f1:a2:94:94:d8:4d:bd:1a:b9:44:95:
7b:21:3a:6d:6a:46:3c:33:ac:ba:94:1d:c4:f3:6d:
59:cf:ae:02:ff:b5:24:f4:66:e8:9f:e7:1b:07:b6:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:37:BE:9B:D7:60:82:5E:9E:BC:B8:64:EB:31:E0:AE:99:D0:BC:89
X509v3 Authority Key Identifier:
keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:1b:52:e4:13:8c:60:f6:9a:9d:8b:34:33:f8:b5:5c:31:
82:ce:95:b2:50:76:ed:f3:b6:6b:d6:90:a7:8b:41:ed:33:06:
f7:55:1c:5c:4a:63:dc:6d:1f:bb:43:bd:30:36:2b:73:e5:3c:
ca:e7:ce:ba:1f:52:6d:14:47:55:95:b9:99:9f:a0:87:ae:50:
2b:96:4f:14:7d:45:3d:68:bb:ed:0c:cd:e0:a5:5d:f4:af:13:
e9:54:97:61:7a:ab:d2:f2:31:60:20:0b:10:c0:d6:f8:0c:8e:
f2:5f:71:a2:88:b3:b7:34:55:d3:fb:0f:92:58:87:ff:64:43:
67:31:50:fd:28:5a:b6:31:13:8b:38:82:c5:ec:56:a9:e2:44:
f4:09:0f:72:f0:3e:4a:15:e6:6c:8f:c7:2c:87:b4:ee:6d:05:
25:48:56:5c:ef:63:b2:26:29:26:a7:cf:66:ef:c6:c5:51:dd:
49:9d:64:30:02:06:ef:f5:44:dd:a4:bc:92:34:bd:d2:49:2c:
d3:18:59:fb:ea:88:27:3b:e6:02:c1:c0:be:e6:8f:7d:9c:5b:
27:86:d4:9c:3e:b0:f8:6d:b0:2b:76:82:14:a4:5f:99:31:ab:
e1:50:ed:c5:76:0e:0c:03:16:cc:ee:09:c8:6a:8f:1f:9b:69:
c6:f4:a2:a7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBHZCMobQ53YU67yLcOGj4tUskd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjNiOTM2MGMwZGRhM2Q2ODhmNGRiZTUzZTJiNmQzY2Vm
NDdmZTgyNTAeFw0yNTA1MTAwOTI3MzFaFw0yNTA1MTEwOTQ2MzFaMDMxMTAvBgNV
BAMTKEExMzdCRTlCRDc2MDgyNUU5RUJDQjg2NEVCMzFFMEFFOTlEMEJDODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9klcc74YL2XuFL21bZu23HoNP
XcWVhJelcxwFYI4nb/BKe3JYR/cIRrntVWG6coT5Ul5jEudiqjR5XBCjXiyPWLjg
S1WAhRXqVLg03q8woVgdftufQcXkmC/bCd5MPBYYNp/c4lf1KMov9FpG7DqQvSbh
L+wV4am45KWXEnE+cvVY9PXcUPK2xztcbXU3af330CEWvkRJQOI+q+f3u+Y80ead
4mtOlwW5j1BBmQ9uBuf6BGr7j3iIkLFthaQKGOZWlF7644saO32IUBdqhzrG1Mf8
eFLxopSU2E29GrlElXshOm1qRjwzrLqUHcTzbVnPrgL/tST0Zuif5xsHtsrfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUoTe+m9dggl6evLhk6zHgrpnQvIkwHwYDVR0j
BBgwFoAUs7k2DA3aPWiPTb5T4rbTzvR/6CUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzAvQjNCOTM2MEMwRERBM0Q2ODhGNERCRTUzRTJCNkQzQ0VGNDdGRTgyNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M3azJEQTNhUFdpUFRiNVQ0cmJUenZS
XzZDVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYmYwNGM3Yy1m
ODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMC9CM0I5MzYwQzBEREEzRDY4OEY0
REJFNTNFMkI2RDNDRUY0N0ZFODI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0MbUuQTjGD2mp2LNDP4
tVwxgs6VslB27fO2a9aQp4tB7TMG91UcXEpj3G0fu0O9MDYrc+U8yufOuh9SbRRH
VZW5mZ+gh65QK5ZPFH1FPWi77QzN4KVd9K8T6VSXYXqr0vIxYCALEMDW+AyO8l9x
ooiztzRV0/sPkliH/2RDZzFQ/ShatjETiziCxexWqeJE9AkPcvA+ShXmbI/HLIe0
7m0FJUhWXO9jsiYpJqfPZu/GxVHdSZ1kMAIG7/VE3aS8kjS90kks0xhZ++qIJzvm
AsHAvuaPfZxbJ4bUnD6w+G2wK3aCFKRfmTGr4VDtxXYODAMWzO4JyGqPH5tpxvSi
pw==
-----END CERTIFICATE-----
Generated at Sun May 11 02:18:01 2025 by rpki-client